.png){kind=icon}
返回
Adversarial example detection using semantic graph matching
.png){kind=icon}
PRE
AI
DOI：10.1016/j.asoc.2023.110317.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Deep neural networks have recently been found to be vulnerable to adversarial examples, which can deceive attacked models with high confidence. This has given rise to significant security threats and raised doubts about the reliability of deploying deep learning models in security-critical domains. Therefore, effectively dealing with various adversarial examples has become an essential but challenging requirement. Adversarial example detection can predict the existence of adversarial examples in advance. However, existing detection methods are usually restricted to specific attacks, lacking generalization and decision-making bases. In this paper, we discover that the common characteristic of adversarial examples is to alter the semantic information recognized by models, which can effectively distinguish adversarial examples and provide interpretability. Based on this perspective, we propose a semantic graph matching (SeMatch) method to execute attack-agnostic adversarial example detection. SeMatch detects adversarial examples by comparing the constructed semantic graphs with the semantic graph prototypes of their predicted classes and further corrects their classification results. Experimental results demonstrate that SeMatch can effectively detect and classify adversarial examples in several attack settings, achieving an average detection and classification accuracy of 96.01% and 89.71%, respectively. When applied to unknown attack scenarios, SeMatch is more effective and interpretable than state-of-the-art methods. & COPY; 2023 Elsevier B.V. All rights reserved.
Keyword:
Deep learning
Security
Adversarial example detection
Generalization
Decision-making bases
Interpretability
Semantic graph
Attack-agnostic
期刊
IF:
6.6
论文数:
1.4W
被引数:
4.8W
机构
引用论文
Effect of Conical Spiral Flow Channel and Impeller Parameters on Flow Field and Hemolysis Performance of an Axial Magnetic Blood Pump.png)
Processes
OAAI
ProcessesIF0
OAAI分享收藏Alcohol and its variable effect on human thermoregulatory response to exercise in a warm environment
PREAI
分享收藏Deep image prior based defense against adversarial examples基于深度图像先验的对抗性示例防御PATTERN RECOGNITION
PATTERN RECOGNITIONIF7.6
PREAI
分享收藏Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction基于自适应降噪的深度神经网络对抗图像样本检测
OAAI
OAAI分享收藏分享收藏
查看更多内容